$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: gB0m4DiVaIBw0gVwB2tDJpWpix9ZxbhH8NvY/wfX9QY= Subject key identifier: 3F:6E:65:E3:17:67:29:1C:24:DD:D9:B6:7E:F3:C9:FB:37:A9:10:B3 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 0237 Signing time: Fri 11 Sep 2026 02:41:20 +0000 Manifest this update: Fri 11 Sep 2026 02:41:19 +0000 Manifest next update: Fri 18 Sep 2026 02:41:19 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: LbWl2InjjK4zbCbWVVD7sXY5ZAsBXdkM/UJa/bTAM3U=) 2: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XzdXJalmDiwrsQ8br8C3/6RWRgcAD1TML6UnE7S8eYc=) 3: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: 0XvamhyH8INrFu62hoTA3sr2g5V8xYOOdXcsdLQK1l8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Sep 11 02:41:19 2026 GMT Not After : Sep 18 02:41:19 2026 GMT Subject: CN=6aa36a50-a60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:04:94:1f:2c:da:b3:fc:68:c0:ac:a9:bb:a7: 7d:7c:c2:d6:a1:eb:1b:e9:d5:a3:14:27:fa:23:de: 90:6e:f8:31:fe:f4:93:15:20:c9:20:11:1c:39:30: eb:b1:92:2b:d7:71:20:cc:12:44:8b:9a:3d:df:ad: fd:86:95:10:36:d7:e5:5f:31:a3:7c:af:7c:9b:fa: 6d:58:ed:af:54:2e:52:e0:1f:fd:cc:b2:1f:9d:09: 72:cb:d4:97:13:83:50:bc:9a:97:44:95:83:b4:81: 96:97:af:2d:9f:b2:07:71:2e:78:70:94:b5:9d:2e: ee:04:3b:58:0f:96:3a:50:4b:79:e8:27:28:7c:9d: 0e:64:1c:a9:5a:c1:a7:a7:1c:55:b7:9a:28:ac:0c: 73:3f:03:94:ec:32:66:cb:9e:37:65:ad:53:ba:8b: a7:62:2c:6a:82:c1:bb:8f:65:d5:07:63:f2:30:f3: b0:9b:87:84:25:69:5d:db:4f:93:2a:bf:af:1d:23: 28:52:f3:94:9c:b2:5f:92:37:0c:69:21:fc:36:36: c2:bd:57:f2:e4:d9:4f:09:fe:ad:b3:1e:9d:f4:df: 2e:dc:e2:b4:8c:e9:92:e7:81:47:c9:82:e1:db:f3: 66:a3:41:42:22:31:a8:33:85:b8:ea:42:21:b1:a1: 20:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6E:65:E3:17:67:29:1C:24:DD:D9:B6:7E:F3:C9:FB:37:A9:10:B3 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9c:f9:2a:e0:ea:27:7d:49:88:ca:5c:dd:2b:8b:81:7c:98: 2e:14:88:f7:43:21:e9:de:5e:4d:91:05:29:5f:8b:78:a6:5b: e0:9f:ea:e2:66:66:69:0b:19:40:39:6c:9e:47:df:0d:14:ad: 39:27:be:62:b7:87:21:9a:43:52:9e:7c:df:f0:5a:f6:34:6b: c7:16:be:6d:0e:61:5f:bc:78:10:9d:36:df:5f:29:ad:ca:fa: 74:b0:d0:a0:c0:81:8e:97:fa:78:ce:88:da:91:3e:4d:a2:99: 70:33:94:99:2e:fe:c8:ec:3d:b9:4e:14:c8:75:d3:35:a0:e3: cd:34:ef:83:33:0d:e5:76:ac:15:c7:16:ef:12:90:50:c2:f9: b2:65:f3:46:bb:e3:51:1d:c5:df:b0:8c:c7:a0:d4:4b:1e:c3: 8b:0f:57:1c:68:a0:1f:3e:46:80:79:6e:77:87:f9:42:5c:94: dc:97:9c:34:36:bd:b2:f1:02:89:62:91:88:72:29:09:4d:f2: 25:2d:7c:ec:60:6a:fb:39:06:0e:37:10:3f:0b:4f:c4:74:89: a1:56:ac:52:8f:a1:f9:53:23:74:6b:63:6f:85:a7:aa:2a:b0: 6f:09:51:fc:a5:97:3c:71:38:56:61:13:5c:f2:99:a9:1a:31: 98:5c:6a:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjYwOTExMDI0MTE5WhcNMjYwOTE4MDI0MTE5WjAYMRYwFAYD VQQDEw02YWEzNmE1MC1hNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QSUHyzas/xowKypu6d9fMLWoesb6dWjFCf6I96Qbvgx/vSTFSDJIBEcOTDr sZIr13EgzBJEi5o93639hpUQNtflXzGjfK98m/ptWO2vVC5S4B/9zLIfnQlyy9SX E4NQvJqXRJWDtIGWl68tn7IHcS54cJS1nS7uBDtYD5Y6UEt56CcofJ0OZBypWsGn pxxVt5oorAxzPwOU7DJmy543Za1TuounYixqgsG7j2XVB2PyMPOwm4eEJWld20+T Kr+vHSMoUvOUnLJfkjcMaSH8NjbCvVfy5NlPCf6tsx6d9N8u3OK0jOmS54FHyYLh 2/Nmo0FCIjGoM4W46kIhsaEgjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9uZeMX ZykcJN3Ztn7zyfs3qRCzMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX5z5KuDqJ31JiMpc3SuLgXyYLhSI90Mh6d5eTZEFKV+LeKZb4J/q4mZmaQsZ QDlsnkffDRStOSe+YreHIZpDUp583/Ba9jRrxxa+bQ5hX7x4EJ02318prcr6dLDQ oMCBjpf6eM6I2pE+TaKZcDOUmS7+yOw9uU4UyHXTNaDjzTTvgzMN5XasFccW7xKQ UML5smXzRrvjUR3F37CMx6DUSx7Diw9XHGigHz5GgHlud4f5QlyU3JecNDa9svEC iWKRiHIpCU3yJS187GBq+zkGDjcQPwtPxHSJoVasUo+h+VMjdGtjb4WnqiqwbwlR /KWXPHE4VmETXPKZqRoxmFxqEQ== -----END CERTIFICATE-----Generated at Fri Sep 11 09:26:30 2026 by rpki-client